diff --git a/roles/mail/templates/dns/static-mail-domains.yml b/roles/mail/templates/dns/static-mail-domains.yml
index d5a5215333025a55d0e4adc84884716903d0e2f7..f1976bccad1efdb12164e20bbcbac133df851482 100644
--- a/roles/mail/templates/dns/static-mail-domains.yml
+++ b/roles/mail/templates/dns/static-mail-domains.yml
@@ -1,5 +1,6 @@
 {% for domain in static_mail_domains %}
 {{ domain }}:
+  DNSSEC: "true"
   EXTENDS: ["@base", "@hosted_mail_mixin"]
 
 {% endfor %}